CyberRota Analysis
AI-GeneratedZITADEL versions prior to 4.17.1 are vulnerable to an authentication bypass in the Login V2 feature, enabling unauthenticated attackers to exploit OTP codes delivered via returnCode. This flaw allows attackers to hijack accounts, including those of administrators, by intercepting OTP codes sent through email or SMS, leading to potential full account takeover. Organizations using ZITADEL should prioritize patching this vulnerability to safeguard against unauthorized access and account compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over accounts by obtaining OTP codes via the returnCode delivery type. Attackers knowing a login name of a victim with OTP-Email and OTP-SMS enrolled can read both codes from server-action responses to gain MFA-authenticated sessions, including administrator takeover.